Read the docs

WishList Products

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WishList Products records in CISA KEV

No WishList Products vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-24634 CVE-2024-37106 · GHSA-xm6v-h562-fh85

WordPress WishList Member X plugin < 3.26.7 - Unautenticated Plugin Settings Change Leading to Stored XSS vulnerability

Priority MEDIUM 42

Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WishList Member X: from n/a through 3.26.6

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00361 Published 2024-11-01 No fix listed CWE-862
TI-2024-24636 CVE-2024-37108 · GHSA-3f4r-9c59-8g2q

WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability

Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WishList Products WishList Member X allows Path Traversal.This issue affects WishList Member X: from n/a through 3.26.6.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00619 Published 2024-11-01 No fix listed CWE-22
Open these records in search →